Senior Cloud Security Engineer (Azure/ Microsoft)

Accountabilities:

• Design, implement, and maintain advanced security controls across Azure, Entra ID, Intune, Microsoft 365, and PKI environments.
• Lead vulnerability management, security hardening, remediation efforts, and compliance initiatives aligned with NIST, CIS, and PCI frameworks.
• Develop and maintain Zero Trust architectures including identity-based access, conditional access, least-privilege enforcement, and device trust controls.
• Implement and manage Zero Trust Network Access (ZTNA) solutions to support secure remote and cloud-based operations.
• Automate security and compliance processes using PowerShell and other scripting technologies.
• Manage security monitoring, logging, incident response, and remediation activities for critical vulnerabilities and emerging threats.
• Support audit readiness activities through risk management platforms, compliance reporting, and security documentation development.
• Conduct security assessments, infrastructure reviews, and compliance validation across cloud and on-premise environments.
• Secure AI-enabled tools and Microsoft Copilot-related environments by implementing governance, monitoring, and data protection controls.
• Partner with cross-functional teams and stakeholders to strengthen security posture, improve operational resilience, and drive continuous cybersecurity improvements.
• Lead infrastructure migration and enhancement initiatives while ensuring compliance and security best practices are maintained.

Requirements:

• Associate’s degree in Information Technology, Computer Science, or a related field required; Bachelor’s degree preferred.
• Minimum 10 years of experience in systems administration and enterprise infrastructure environments.
• At least 8 years of experience securing Microsoft technologies and implementing enterprise security hardening practices.
• Strong expertise in Azure, Entra ID, Microsoft 365, Intune, Group Policy, and PKI infrastructure management.
• Deep knowledge of NIST frameworks, CIS benchmarks, PCI standards, and security compliance methodologies.
• Proven experience with Zero Trust architecture, identity security, secure remote access, and cloud security engineering.
• Advanced scripting and automation skills using PowerShell or similar scripting languages.
• Experience managing security incidents, vulnerability remediation, audit processes, and risk mitigation initiatives.
• Strong understanding of security monitoring tools, log analysis platforms, vulnerability assessment solutions, and compliance validation processes.
• Experience securing AI-enabled environments and implementing controls for AI governance and data protection is highly desirable.
• Excellent communication, collaboration, and documentation skills with the ability to work across technical and non-technical teams.
• Relevant certifications such as CISSP, CCSP, Security+, Azure/Microsoft certifications, or ITIL credentials are considered highly valuable.

Benefits:

• Competitive annual salary ranging from $112,000 to $130,000 based on experience and qualifications.
• Fully remote work environment with flexible scheduling and limited travel requirements.
• Comprehensive Medical, Dental, and Vision insurance coverage.
• Generous retirement benefits with a 2-for-1 employer match on 403(b) contributions up to 10% of base salary.
• Employer-paid Life, AD&D, Short-Term Disability, and Long-Term Disability coverage.
• Generous paid time off including vacation days, personal time, holidays, and additional office closure time during year-end holidays.
• Reduced 36-hour work week with no reduction in pay, providing additional work-life balance benefits.
• Professional development assistance and ongoing learning opportunities.
• Monthly connectivity reimbursement and Employee Assistance Program (EAP).
• Opportunity to work on cutting-edge cloud, cybersecurity, and AI governance initiatives within a collaborative and mission-driven environment.